We just put together a post primarily aimed at architects and lead developers of web apps. Check it out: http://labs.securitycompass.com/index.php/2011/02/10/5-key-design-decisions-that-affect-security-in-web-applications/ -- Rohit Sethi Security Compass http://www.securitycompass.com twitter: rksethi